CloudSheriff Security Engineers - CloudSheriff

Sign in Subscribe

CloudSheriff Security Engineers

9 Things To Do Before Someone Steals Your AWS Credentials

9 Things To Do Before Someone Steals Your AWS Credentials

Amazon Web Services already has a defense for most of the things a Security Operations Center cares about. But what about stolen credentials? Do these 9 things beforehand to limit the pain.

Five ways to prepare for management questions about cloud security

Five ways to prepare for management questions about cloud security

Imagine you’ve been called into a quarterly Board meeting. They want to know how things are going with the cloud. They are really asking some good questions. You had mentally prepared some answers to keep the spotlight off you, but it’s clear they are going to dig in.

How to hit the ever-moving target of Least Privilege access

How to hit the ever-moving target of Least Privilege access

How many users and roles have way too much access, out of convenience? When is the last time you checked to make sure access levels were consistent with the business need? And when is the last time you reduced someone’s access?

Why you need a dedicated AWS security account

Why you need a dedicated AWS security account

“Please provide proof that these logs haven’t been tampered with.” It’s the nightmare scenario for any IT department. You’ve been notified by an auditor – or a legal team, a government body, or even a customer — that your cloud security program is being reviewed. You’ve been told

How to fix alarm overload with cloud security automation

How to fix alarm overload with cloud security automation

So you’ve got your new security monitoring system set up. You have alarms that send you emails when the root user logs in. You get a slack message when someone launches an RDS instance open to the internet. And everyone gets a text message when an S3 bucket is

Best Practices For Using and Protecting AWS Access Keys

Best Practices For Using and Protecting AWS Access Keys

Is your development team taking shortcuts with AWS access keys? Is your team passing around keys on Slack or email? If you don’t know the answer off the top of your head, it’s worth asking around. This post is for you. Access keys (also referred to as an

The high-performing team's guide to AWS Identity and Access Management

The high-performing team's guide to AWS Identity and Access Management

Getting deep into IAM is a great way to have analysis paralysis. Here are some common sense, high-leverage tips to get secure but keep rolling. Intimidated or annoyed by the complexity of IAM? Worried that if you dive into IAM, you’ll never get out because the details go on

5 Habits That Will Lead to Security Breaches

5 Habits That Will Lead to Security Breaches

In today’s competitive business world, there is pressure to innovate like no other time in history. With the rise of the cloud and its ability to support rapid, iterative experimentation, you are going faster than ever before. With that speed, you are always trying to get new features and